$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a83274b2-7b62-4ecb-bdbf-6f4841b54540.cer File: a83274b2-7b62-4ecb-bdbf-6f4841b54540.cer (raw, json) Hash identifier: vnI0hfDWpquJVynAD5w5TPM5bYX2YnZlweTUHoSVbd8= Subject key identifier: E7:4D:BE:3E:53:B5:88:E6:22:F5:23:AB:95:CA:8D:8E:22:FB:99:C6 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584B86452C8C92C6E5F7DF8A7920 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a83274b2-7b62-4ecb-bdbf-6f4841b54540/a83274b2-7b62-4ecb-bdbf-6f4841b54540.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a83274b2-7b62-4ecb-bdbf-6f4841b54540/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Oct 2025 00:45:23 +0000 Certificate not after: Tue 18 Jan 2028 01:45:23 +0000 Subordinate resources: IP: 165.204.0.0/16 IP: 192.73.217.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:45:2c:8c:92:c6:e5:f7:df:8a:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Oct 15 00:45:23 2025 GMT Not After : Jan 18 01:45:23 2028 GMT Subject: CN=a83274b2-7b62-4ecb-bdbf-6f4841b54540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:97:be:a8:0e:db:a6:6a:57:ce:f8:95:74:2e: 09:be:b4:c8:2a:73:55:5a:ed:2b:cf:12:39:95:57: 10:db:60:42:d2:28:9a:4c:f7:d3:75:a8:c7:8e:b7: 5f:f6:b2:61:4d:52:69:b2:e8:90:f1:25:b0:4a:13: 41:a9:76:2d:b7:14:71:9a:db:ba:e4:65:b9:ea:4c: 10:b5:d4:2d:95:d2:8a:fa:e1:34:c7:a2:b7:0f:75: d3:26:1d:0e:e3:cc:5a:49:86:4a:63:b4:b6:38:6e: e4:96:b7:c6:2b:36:aa:1f:ab:36:c4:f4:42:fe:f4: 17:8a:ed:8a:49:45:ad:ff:82:f5:56:46:5f:0f:aa: 7c:5e:8f:aa:ef:c2:fe:91:14:0d:d1:39:7d:17:b2: 4e:c3:cd:32:51:25:6f:14:31:2d:dd:fa:95:86:25: 87:eb:47:aa:c9:99:72:9f:87:80:60:5c:fe:c6:d0: 80:b6:72:ce:c6:71:ee:e2:36:9e:1f:69:61:74:23: 76:a1:b7:b1:d4:04:ee:e0:b8:19:bf:eb:4f:44:1b: 0d:95:47:be:96:f0:ed:af:c1:71:a4:86:c5:5f:29: 85:62:3d:3c:b6:7f:2e:82:8f:15:0c:a5:df:23:d3: 7a:b7:cc:3d:cb:d6:d9:cb:c9:c1:ad:50:80:a3:33: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4D:BE:3E:53:B5:88:E6:22:F5:23:AB:95:CA:8D:8E:22:FB:99:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a83274b2-7b62-4ecb-bdbf-6f4841b54540/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a83274b2-7b62-4ecb-bdbf-6f4841b54540/a83274b2-7b62-4ecb-bdbf-6f4841b54540.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 165.204.0.0/16 192.73.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9a:6c:77:da:58:d9:cd:f8:e4:c6:3a:73:6b:3c:68:8a:51: 42:49:2f:ec:b1:cf:82:71:59:44:28:f7:a0:76:10:96:30:fc: 9b:1c:c7:2f:cd:6e:a0:83:5b:ff:4a:c7:d7:59:02:dd:49:0d: f7:0a:cc:17:a9:a4:e5:ae:c1:13:5e:91:ba:f3:f6:e1:06:29: 9d:9e:bf:79:95:47:dd:f3:a4:86:61:3e:f4:d2:51:f8:6a:d2: 22:7f:cf:49:68:3e:c0:84:d5:f6:a9:02:e2:b7:6a:9c:a9:ff: 66:38:3d:86:29:97:a2:93:d6:40:15:66:af:de:ec:ff:34:88: b1:3d:3a:65:93:d8:4b:d8:51:4f:2e:25:c1:1b:2d:7f:27:2e: d8:c6:3b:65:b0:d5:79:9b:76:d0:2b:b4:d2:0c:3f:24:9f:62: 50:91:c1:44:7d:75:31:36:c0:79:77:42:68:6e:91:1c:da:79: 1b:88:ec:b9:bd:13:42:01:b9:56:a1:53:b1:41:da:5b:28:f6: 68:4d:f9:f0:cf:98:bd:71:ae:fe:a7:3a:d8:65:19:b0:64:5a: 33:8a:a2:07:cb:26:a6:7a:72:5e:3b:fa:97:67:7b:f8:bd:f3: f5:7e:5f:81:34:13:59:4e:cd:b9:56:6b:b2:73:37:be:d0:df: 8a:a4:71:9d -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEuGRSyMksbl99+KeSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI1MTAxNTAwNDUyM1oXDTI4MDExODAxNDUyM1owLzEtMCsGA1UEAxMk YTgzMjc0YjItN2I2Mi00ZWNiLWJkYmYtNmY0ODQxYjU0NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5e+qA7bpmpXzviVdC4JvrTIKnNVWu0rzxI5 lVcQ22BC0iiaTPfTdajHjrdf9rJhTVJpsuiQ8SWwShNBqXYttxRxmtu65GW56kwQ tdQtldKK+uE0x6K3D3XTJh0O48xaSYZKY7S2OG7klrfGKzaqH6s2xPRC/vQXiu2K SUWt/4L1VkZfD6p8Xo+q78L+kRQN0Tl9F7JOw80yUSVvFDEt3fqVhiWH60eqyZly n4eAYFz+xtCAtnLOxnHu4jaeH2lhdCN2obex1ATu4LgZv+tPRBsNlUe+lvDtr8Fx pIbFXymFYj08tn8ugo8VDKXfI9N6t8w9y9bZy8nBrVCAozNvVwIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFOdNvj5TtYjmIvUjq5XKjY4i+5nGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h ODMyNzRiMi03YjYyLTRlY2ItYmRiZi02ZjQ4NDFiNTQ1NDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2E4MzI3NGIyLTdiNjItNGVjYi1i ZGJmLTZmNDg0MWI1NDU0MC9hODMyNzRiMi03YjYyLTRlY2ItYmRiZi02ZjQ4NDFi NTQ1NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwClzAMEAMBJ2TBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNmmx32ljZzfjk xjpzazxoilFCSS/ssc+CcVlEKPegdhCWMPybHMcvzW6gg1v/SsfXWQLdSQ33CswX qaTlrsETXpG68/bhBimdnr95lUfd86SGYT700lH4atIif89JaD7AhNX2qQLit2qc qf9mOD2GKZeik9ZAFWav3uz/NIixPTplk9hL2FFPLiXBGy1/Jy7YxjtlsNV5m3bQ K7TSDD8kn2JQkcFEfXUxNsB5d0JobpEc2nkbiOy5vRNCAblWoVOxQdpbKPZoTfnw z5i9ca7+pzrYZRmwZFoziqIHyyamenJeO/qXZ3v4vfP1fl+BNBNZTs25Vmuycze+ 0N+KpHGd -----END CERTIFICATE-----Generated at Sun Oct 19 20:31:06 2025 by rpki-client